# Firebase — how to use (mcp.ai)

Connect your Firebase account and use 8 tools for security and identity straight from your AI agent. Connect with your own API key. Firebase Authentication client tools for project discovery, user sign-in and sign-up flows, out-of-band codes, and Secure Token refresh using a Firebase Web API Key.

## Option A — via MCP (recommended)
Remote MCP endpoint (HTTP, streamable): `https://api.mcp.ai/p_firebase?ms=1787295720000`
Add it as a custom/remote MCP connector in your client (Claude, Cursor, VS Code…), then authenticate when prompted. Once connected, ask the agent to use the server's tools (e.g. `firebase_discover_sign_in_methods`).

## Option B — via direct REST API
Base URL: `https://api.mcp.ai/api/firebase`
Auth: `Authorization: Bearer sk_live_…` — create a workspace API key at https://mcp.ai/settings/api-keys
Discover endpoints: `GET https://api.mcp.ai/api/firebase/_endpoints`

### Endpoints
- `POST https://api.mcp.ai/api/firebase/discover/sign/in/methods` — Look up sign-in methods previously used by a Firebase account email. Firebase anti-enumeration settings can suppress results, so empty lists or an absent registered value do not prove that the account
  - body: { identifier: string, continue_uri: string }
- `POST https://api.mcp.ai/api/firebase/get/auth/project/config` — Get the public Firebase Authentication configuration associated with the connected Web API key, including the project ID and authorized domains. This does not authenticate a user or grant backend acce
  - body: { firebase_app_id?: string }
- `POST https://api.mcp.ai/api/firebase/refresh/id/token` — Exchange a Firebase refresh token for a fresh Firebase ID token and rotated refresh token using Google's Secure Token service.
  - body: { grant_type?: string, refresh_token: string }
- `POST https://api.mcp.ai/api/firebase/sign/in/with/custom/token` — Exchange a trusted server-minted Firebase custom token for a Firebase ID token and refresh token. The exchange may create the Firebase user on their first sign-in.
  - body: { custom_token: string }
- `POST https://api.mcp.ai/api/firebase/sign/in/with/email/link` — Complete Firebase email-link sign-in using an email address and the one-time OOB code from a previously delivered sign-in link. This may create the Firebase user on first sign-in; it does not send ema
  - body: { email: string, oob_code: string }
- `POST https://api.mcp.ai/api/firebase/sign/in/with/idp` — Sign in with one configured external identity provider using provider-specific OAuth or OIDC credential parameters. This sign-in-only tool may create the Firebase user on first sign-in and rejects Fir
  - body: { provider_id: string, request_uri: string, provider_parameters: object, return_idp_credential?: boolean }
- `POST https://api.mcp.ai/api/firebase/sign/in/with/password` — Sign in an existing Firebase Authentication user with email and password and return fresh ID and refresh tokens. Requires the Email/Password provider to be enabled.
  - body: { email: string, password: string }
- `POST https://api.mcp.ai/api/firebase/verify/password/reset/code` — Validate a Firebase password-reset OOB code and identify the associated email and request type without changing the password.
  - body: { oob_code: string }

## Example prompts
- "What can I do in Firebase?"
- "Show me a summary of my Firebase account"

## More
- Page: https://mcp.ai/firebase
- Agent spec (llms.txt): https://mcp.ai/firebase/llms.txt
- Postman collection: https://mcp.ai/firebase/postman.json